Privacy policy

Botlane is a product of IDM VALLEY Pvt. Ltd., A7/15 Ground Floor, Sec - 85 BPTP, Faridabad, Haryana, India, 121002 ("we", "us"). It helps businesses send and receive WhatsApp messages. This policy explains what personal data we handle, why, who sees it, how long we keep it and what you can ask us to do. It follows the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India.

Two kinds of people, two roles

• Our customers are businesses that open a workspace. For their own sign-in details and billing, we decide how the data is used.
• Our customers' customers are the people a business messages. For their phone numbers, names, consent records and messages, the business decides what is collected and why; we only store and process it on the business's behalf and on its instructions. If you are a person who received a message and want to know or change what a business holds about you, ask that business first. You can also write to us and we will pass your request on.

What we collect

From people who use the service (workspace members)

• Name, email address and a password (stored only as a one-way hash), role, and the time of your last sign-in.
• Business name, billing name, address, GST number and state, which appear on your invoices.
• Payment details for a UPI payment: the amount, the reference we gave you, the transaction ID (UTR) you typed in and, if you gave it, the name on the paying account. We never see your UPI PIN, bank login or card details.
• Technical records: IP address, browser type, security and audit logs of sensitive actions, and error logs.

On behalf of businesses

• Contact details a business uploads or collects: phone number, name, email, tags, lists, extra details such as a due date or amount, and the record of when and how the person agreed to be messaged or opted out.
• Messages sent and received through WhatsApp, with their delivery and read status, and the files shared in them.
• Documents and FAQ text a business gives its chatbot, and the questions customers ask it.

Why we use it

• To run the service: sign you in, send and receive messages, show your inbox, campaigns, reminders and reports.
• To bill you and issue GST invoices, and to confirm UPI payments.
• To keep the service safe: detect abuse, protect WhatsApp quality ratings, prevent fraud and fix faults.
• To email you about your account: verification, password reset, plan renewals, and notices about the service. We do not send marketing email unless you ask for it.
• To meet legal duties such as tax record keeping.

We do not sell personal data. We do not use messages or contacts to build advertising profiles, and we do not use a business's customer data to train AI models.

Who we share it with

Only the companies that are needed to run the service:

• Meta Platforms (WhatsApp Business Platform). Messages, phone numbers and delivery status pass through WhatsApp's systems. Meta handles this under its own terms and privacy policy, and its servers may be outside India.
• The AI provider, only when a business switches the chatbot on. The customer's question and the relevant passages from the business's own documents are sent to the AI model that the service is set to use, by default Anthropic (Claude); we may enable Google (Gemini) or a model we host ourselves. Their servers may be outside India. We send only what is needed to answer.
• Our email delivery provider, to deliver the emails described above.
• Our hosting. The service runs on our own virtual private server located in India.
• Authorities, when the law requires it, for example a lawful order from a court or government body.

If the business that owns your workspace invites team members, those members can see the workspace's contacts and conversations according to their role.

Where it is stored

Our database and files are stored on our server in India. Data sent to Meta or to an AI provider as described above may be processed outside India. Passwords are hashed, secrets we store for you (such as access tokens) are encrypted, and connections to the service use HTTPS.

How long we keep it

• While your workspace is open, we keep its data so the service works.
• If you close your workspace or ask us to delete it, we remove its contacts, messages, files and chatbot content within 30 days. Backups of it expire on their normal schedule afterwards.
• A workspace that stays read-only after a trial or a lapsed plan is kept for 30 days at least, so you can come back; after that we may delete it.
• Invoices and payment records are kept for 8 years because tax and accounting law requires it.
• Security and audit logs are kept only as long as needed to protect the service and investigate problems.

Your choices and rights

You can ask us to give you a copy of your personal data, correct it, delete it, or stop using it for a purpose you did not agree to, and you can withdraw consent you gave us. A workspace owner can export contacts at any time from the Contacts page. To make a request, email hi@idmvalley.com from the address on your account. We will reply within 30 days. We may need to confirm who you are first, and we may keep what the law obliges us to keep.

If a business messages you and you do not want to hear from it, reply STOP. The service honours it straight away and will not message that number again for that business.

Cookies and local storage

We use only what is needed: cookies that keep you signed in and protect forms from forgery, and a small setting in your browser that remembers your light or dark theme and whether the sidebar is collapsed. We do not use advertising or tracking cookies.

Children

The service is for businesses and for people aged 18 or over. We do not knowingly collect data from children. Businesses must not use the service to message children without the consent the law requires.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell workspace owners by email or in the app.

Contact

IDM VALLEY Pvt. Ltd., A7/15 Ground Floor, Sec - 85 BPTP, Faridabad, Haryana, India, 121002
Email: hi@idmvalley.com. Write "Privacy" in the subject line so it reaches the right person.